Director, Privacy & Data Protection

Universal Music Group, Inc.

. Support Universal Music Group's global privacy and data protection program .

Posted 9/29/2026full-timeUnited StatesLead💰 $89,700 - $180,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in privacy and data protection law, including U.S. federal and state privacy laws, GDPR, and cybersecurity incident response. Proficient in drafting and negotiating data protection agreements and providing guidance on privacy requirements across various digital platforms and marketing practices.

Highest-signal resume keywords

J.D. From An Accredited Law School8+ Years Of Relevant Legal ExperienceStrong Working Knowledge Of U.S. Federal And State Privacy LawsExperience Drafting And Negotiating Data Processing AgreementsCIPP/US, CIPP/E, Or Another Relevant Privacy Certification

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Privacy LawData ProtectionCybersecurityLegal ResearchDraftingNegotiationData Subject RightsComplianceIncident ResponseDigital Marketing

Soft Skills

Analytical SkillsSound JudgmentOrganizational SkillsCommunication SkillsCollaboration Skills

Certifications & Qualifications

CIPP/USCIPP/E

Industry Keywords

EntertainmentMusicDigital MediaE-CommerceAdvertisingConsumer ProtectionData SecurityPrivacy PoliciesVendor DiligenceOnline Tracking Technologies

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Support Universal Music Group's global privacy and data protection program
Draft, review, and negotiate data protection and privacy terms in commercial agreements
Partner with Business & Legal Affairs teams on privacy issues in artist, vendor, technology, platform, licensing, e-commerce, marketing, and other commercial arrangements
Handle day-to-day legal work relating to data subject and consumer privacy rights requests
Support privacy-law aspects of cybersecurity and data security incidents
Assist with investigations of potential privacy and data security issues
Advise business and legal teams on privacy requirements affecting websites, applications, digital platforms, artist and fan experiences, e-commerce, advertising, and marketing
Provide guidance on online advertising, tracking technologies, marketing communications, consent and preference management, and consumer protection requirements
Advise on U.S. federal and state privacy laws, GDPR, and international privacy requirements
Support privacy reviews of new business initiatives, technologies, vendors, products, and data uses
Assist with third-party privacy and data protection matters, including vendor diligence, data transfers, questionnaires, and remediation
Maintain and improve privacy policies, procedures, templates, playbooks, and other privacy resources
Improve processes for contract review, rights requests, incident response, and recurring privacy matters
Support responses to regulatory inquiries, audits, and other privacy matters
Monitor developments in privacy, data protection, cybersecurity, digital marketing, and consumer protection law
Provide privacy guidance and training to Legal, business, and operational teams
Support privacy issues involving emerging technologies and new data uses
Collaborate with colleagues across UMG's labels, business units, and territories

Requirements

What you’ll need

J.D. from an accredited law school
Active membership in good standing in at least one U.S. state bar
8+ years of relevant legal experience
Substantial experience in privacy, data protection, cybersecurity, technology transactions, or a closely related field
Experience drafting and negotiating data processing agreements and privacy, data use, and security provisions in commercial agreements
Strong working knowledge of U.S. federal and state privacy laws, including CCPA/CPRA and other comprehensive state privacy laws
Meaningful familiarity with GDPR and international data protection requirements
Experience advising on data subject and consumer privacy rights requests, including access, deletion, correction, and related requests
Experience advising on privacy issues involving websites, digital advertising, online tracking technologies, e-commerce, marketing, and consumer-facing data practices
Familiarity with consumer protection and marketing requirements relevant to digital and direct-to-consumer activities
Meaningful experience supporting cybersecurity or data security incident response
Familiarity with breach-notification requirements and experience working with information security or technical teams during investigations
Strong legal research, analytical, drafting, and negotiation skills
Ability to understand technical and operational facts and identify relevant privacy, cybersecurity, and digital marketing legal issues
Sound judgment and ability to handle significant matter volume independently while recognizing when escalation is warranted
Strong organizational skills and ability to manage multiple matters and competing priorities
Excellent communication and collaboration skills
CIPP/US, CIPP/E, or another relevant privacy certification preferred
Experience in entertainment, music, digital media, technology, e-commerce, advertising, or another consumer-facing and data-intensive industry is a plus

Benefits

Comp & perks

Comprehensive medical, dental, and vision coverage
100% coverage for out-patient in-network mental health services
Fertility coverage for eligible medical plan participants
Wellbeing reimbursements for fitness classes, spa treatments, meal services, travel, and more (up to $720/year)
Student Loan Repayment Assistance and Tuition Reimbursement
401(k) with 100% immediate vesting on the first 5% of contributions, plus an additional UMG contribution
Flexible Paid Time Off (PTO) for exempt employees
3-weeks PTO for non-exempt employees
2-weeks paid Winter Break
10 Company Holidays, including Juneteenth and Wellbeing Day
Summer Fridays between Memorial Day and Labor Day
Generous paid parental leave for every type of parent